Unless there is a plan to allow attesters that are independent bodies then this is absolutely a threat to the open internet, or what's left of it.
The biggest dead canary for me is the lack of calling this out explicitly by Google or Apple. We're left to assume that Google is hand-wavingly saying "don't worry we can take care of that" when the private companies already monopolizing parts of the Internet are the absolute last people we want handling attestation.
- Content sites implement Web Integrity API to block bots
- But they still allow Google crawlers, because Google is their source of traffic
- Google competitors are locked out
How do attesters solve this problem?